Special characters in pre-shared key for non-Meraki site-to-site vpn

[Jeizzen]

Hi,

It is written that special characters are not recommanded at beginning or end of the key for Client VPN:

Client VPN uses the L2TP/IP protocol, with the following encryption and hashing algorithms: 3DES and SHA1 for Phase1, AES128/3DES and SHA1 for Phase2. As a best practice, the shared secret should not contain any special characters at the beginning or end.

I'm wondering if this can create an issue, but for non-meraki site-to-site VPN ?

thanks

[cmr]

@Jeizzen if you are having an issue and the psk has a special character at the beginning or end then I'd change it to see.  It would not surprise me if the same applies to both.

[PhilipDAth]

The issue with client VPN is that many of the GUIs don't accept some special characters correctly.  So you type it in correctly, but it doesn't work.

Weather you have the same issue with non-Meraki VPNs will also depend on devices being able to process special characters.

I'll give you a specific example.  Cisco routers use the ' to denote the start of a comment.  So if you have a PSK with a ' character in it, it ignores that character and the rest of the PSK.  Looks perfect, just doesn't work.